CVE-2026-53095

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF subsystem where kprobe write ctx can be abused via freplace. Because the actual program type of uprobe is KPROBE, it can be used to modify struct pt regs when a kprobe attaches to kernel functions. This allows an freplace program to attach to a kprobe program and modify the arguments of the kernel function being executed, such as setting the first argument to 0 via the regs->di variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.